130.94.112.197
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- LIGHT NODE LIMITED
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS154177
- Domain Name
- lightnode.com
- Country
- 🇷🇴 Romania
- City
- Bucharest, Bucharest
Abuse Reports
Total reports
21 from
18 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 32400)
Source port: 41484
TTL: 241
Packet length: 40
TOS: 0x00
This report (for 130.94.112.197) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 32400/tcp
|
Port Scan | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
|
Port Scan | |
| Anonymous |
Blocked by firewall on hugin [32400/tcp] | Rule: UFW | SPT: 40266 | TTL: 240 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 32400)
Source port: 50108
TTL: 241
Packet length: 40
TOS: 0x00
This report (for 130.94.112.197) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇭 gfk31 |
|
Exploited Host Web App Attack Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 32400
GET /identity
User-Agent: Mozilla/5.0
Accept: */*; 32400 [1] TCP
|
Web App Attack | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 32400
GET /identity
User-Agent: Mozilla/5.0
Accept: */*; 32400 [1] TCP
|
Hacking Bad Web Bot | |
| 🇳🇱 Maurice |
Honeypot hit: HTTP/1.1 request on 32400
GET /identity
User-Agent: Mozilla/5.0
Accept: */*; 32400 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Hacking Bad Web Bot | |
| 🇬🇧 sandra361 |
Port scan detected: 8 attempts across 1 port (32400). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=130.94.112.197 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=64382 DF PROTO=TCP SPT=55124 DPT=32400 WINDOW=64240 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇵🇱 sefinek.net |
Honeypot hit: HTTP/1.1 request on 32400
GET /identity
User-Agent: Mozilla/5.0
Accept: */*; 32400 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Hacking Bad Web Bot | |
| 🇫🇷 Kejult |
Honeypot Finding: active TCP application payload captured by Honeytrap; 17 payload-bearing connection/event(s), 1615 payload byte(s) total, maximum payload 95 byte(s). Target port(s): 32400.
|
Port Scan Hacking | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 32400
GET /identity
User-Agent: Mozilla/5.0
Accept: */*; 32400 [1] TCP
|
Hacking Bad Web Bot | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: HTTP/1.1 request on 32400
GET /identity
User-Agent: Mozilla/5.0
Accept: */*; 32400 [1] TCP
|
Hacking Bad Web Bot | |
| 🇩🇪 _ArminS_ |
SP-Scan 50998:32400 detected 2026.10.27 07:15:05
blocked until 2026.12.16 00:17:52
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown